Privacy Policy

Last Updated: December 6, 2025

1. Introduction

This Privacy Policy explains how VFX Vault ("we," "our," or "the Plugin") collects, uses, and protects your information when you use our Roblox Studio plugin and related services.

VFX Vault is a third-party plugin for Roblox Studio that allows creators to save and share visual effects. By using VFX Vault, you agree to this Privacy Policy.

Age Requirement: You must be at least 13 years of age (or the minimum age required in your jurisdiction) to use VFX Vault. We do not knowingly collect personal information from users under 13.

2. Roblox OAuth and Data Access

When you authenticate with VFX Vault, we use Roblox's official OAuth 2.0 system. We only request the minimum permissions needed to identify your account.

2.1 User Control Over Permissions

Revoking Access: You can revoke VFX Vault's access to your Roblox account at any time by visiting:

Roblox Account Settings → Security → Authorized Apps → VFX Vault → Revoke

Effect of Revocation:

• Upon revocation, VFX Vault will immediately stop processing requests using your authorization
• The Plugin will no longer function until you re-authorize
• Your stored VFX data remains on our servers unless you separately request deletion
• To delete your data, contact us via Discord before or after revoking OAuth access

3. Information We Collect

3.1 Account Information

When you create an account, we store:

• Roblox User ID: Your unique numeric Roblox identifier (e.g., 123456789)
• Discord User ID: Your unique numeric Discord identifier (used for account linking and support)
• Internal Account ID: A unique identifier we generate for your VFX Vault account
• API Key: A unique key generated for plugin authentication

We do NOT store: Your Roblox username, display name, avatar, email address, password, or any other profile information.

3.2 VFX Data

When you save visual effects, we store:

• The VFX data itself (particle properties, effect configurations)
• Metadata you provide (description, type category)
• Whether the VFX is public or private
• Creation timestamp
• Data size (for storage limit tracking)

3.3 Share Codes

When you create share codes, we store:

• The share code identifier
• Which VFX entries are included
• Reference to your account as the creator

3.4 Technical Data

For security and rate limiting, we temporarily process:

• IP addresses (not stored permanently, used only for rate limiting)
• Request timestamps

4. How We Use Your Information

We use your information solely to:

• Authenticate you and provide access to your VFX library
• Store and serve your saved visual effects
• Enable sharing features through share codes
• Enforce storage limits and rate limits
• Provide customer support
• Improve our service functionality

4.1 Performance Data Restrictions

4.2 What We Do NOT Do

• Sell your personal information to third parties
• Use your data for advertising or marketing profiling
• Share your data with third parties except as required by law
• Access your Roblox account beyond the stated OAuth scopes
• Collect analytics about Roblox platform performance
• Track your activity on Roblox outside of VFX Vault

5. Data Sharing

Your data may be visible to others only in these cases:

• Public VFX: If you mark a VFX as public, other users can view and use it
• Share Codes: Anyone with your share code can access the shared VFX entries

Your private VFX entries and account information are never shared with other users.

6. Data Retention

6.1 Retention Timeline

• Account Data: Retained until you request deletion
• VFX Data: Retained until you delete it or request account deletion
• Share Codes: Retained until you delete them or request account deletion
• Rate Limit Data: Temporary, not permanently stored

6.2 Account Deletion Process

Upon receiving an account deletion request:

• Within 30 days: Your Roblox User ID, Discord User ID, API key, and all personally identifiable information will be permanently deleted
• Immediately: Your VFX data, share codes, and associated metadata will be deleted
• Backup retention: System backups may retain encrypted copies of data for up to 90 days for disaster recovery purposes only, after which they are permanently purged

To request account deletion, contact us via Discord. You do not need active OAuth authorization to request deletion.

7. Data Security

We protect your data through:

• HTTPS/TLS encryption for all communications
• Secure API key authentication
• Rate limiting to prevent abuse
• Database access controls and authentication
• Regular security reviews following OWASP best practices

7.1 Security Limitations

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7.2 Data Breach Notification

In the event of a data breach that affects your personal information:

• We will notify affected users via Discord announcement within 72 hours of discovering the breach
• We will provide details about what data was affected and recommended actions
• We will take immediate steps to secure the service and prevent further unauthorized access

8. Your Rights

You have the right to:

• Access: Request a copy of your stored data
• Delete: Request deletion of your account and all associated data
• Revoke: Revoke Roblox OAuth access at any time through your Roblox account settings
• Portability: Request your VFX data in a portable format
• Rectification: Request correction of inaccurate data

To exercise these rights, contact us via Discord.

8.1 For EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Data Controller: VFX Vault acts as the data controller for your personal information
• Legal Basis: We process your data based on your consent (OAuth authorization) and legitimate interest (providing the service)
• Right to Erasure: You may request deletion of all your data at any time
• Right to Object: You may object to processing by revoking OAuth access
• Right to Lodge Complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction

9. Children's Privacy

VFX Vault is intended for Roblox creators. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us.

10. Third-Party Services

VFX Vault integrates with:

• Roblox: For authentication via OAuth 2.0 (Roblox Privacy Policy)
• Discord: For account linking and support (Discord Privacy Policy)

11. Changes to This Policy

We may update this Privacy Policy. Changes will be posted on this page with an updated "Last Updated" date. Continued use of VFX Vault after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights, join our Discord server:

• Discord: discord.gg/xn3gZSszDU